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INFORMATION SYSTEMS SECURITY GROUP 
MONTHLY HIGHLIGHTS 


od 


December 1977 


SPECIAL ACTIVITIES: STATINTL 


IT. ADP Risk Assessment 


Four representatives of Information Systems 


Security Group conferred with two C er Resource Control 
contractors at on 1 and 2 December 
and discussed ~ Preliminary findings of the Risk Analysis 


Study and prepared a status summary, 


2. CRAFT (Clandestine Record Automated Field Terminal) 


Information Services Staff, DDO advised ISSG 
that the DCI has been briefed on the CRAFT Project and 
the security implications related to this activity. 


3. Treaty Organizations 


At the request of the CIA Treaty Organization 
Control Officer, the Central U. Ss, Registry (Pentagon) 
officially disestablished the CIA SEATO Subregistry 
effective 15 December TOF 22: 


TRAINING: 
lL. Internal 


Three individuals in Information Systems 
security Group attended a one-day course dealing with 
Data Base Concepts sponsored by the Office of Data 
Processing. 


2, External 


All professional personnel in Information Systems 
security Group attended two one-half day tutorials sponsored 
by IBM. The tutorials covered a briefing on the IBM's Data 
Encryption Standard Algorithm and the multiple operating 
Systems associated with the 360 and 370 IBM Computer Systems. 
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GENERAL: 


lL. Information Systems Security Group granted 
twenty-two security approvals for the installation and/or 
relocation of ADP remote terminal devices and/or related 
peripheral equipment. 

2. Information Systems Security Group requested 25K1A 
that OC/Communications Security Staff conduct i oe | 
tests at various contractor locations utilizing computers 
or word processing equipment to process Agency data. 
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